Advisories · Weakness
CWE-506.
Every Advisory and CVE whose sources give the weakness CWE-506, newest first.
- CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in commnader
- CWE-506
* · no fixed version yet
GHSA-855m-jchh-9qjc - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in exprss
- CWE-506
* · no fixed version yet
GHSA-6qc7-jgq7-34rf - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in momen
- CWE-506
* · no fixed version yet
GHSA-h5vm-jhq7-w647 - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in aysnc
- CWE-506
* · no fixed version yet
GHSA-gfjr-xqhm-qvv3 - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in asnyc
- CWE-506
* · no fixed version yet
GHSA-v99v-xgjx-7m7g - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in asycn
- CWE-506
* · no fixed version yet
GHSA-h26f-j4mv-84g7 - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in asnc
- CWE-506
* · no fixed version yet
GHSA-2p99-6f47-8x9j - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in aasync
- CWE-506
* · no fixed version yet
GHSA-9mjp-gv34-3jcf - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in asyync
- CWE-506
* · no fixed version yet
GHSA-rm7c-x424-g2mw - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in asynnc
- CWE-506
* · no fixed version yet
GHSA-5fm9-jmv7-fcx5 - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in asymc
- CWE-506
* · no fixed version yet
GHSA-x6ch-c6rv-f7wh - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in asinc
- CWE-506
* · no fixed version yet
GHSA-87qw-7v97-w34r - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in wepack-cli
- CWE-506
* · no fixed version yet
GHSA-fpw3-x4xq-6vxq - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in jajajejejiji
- CWE-506
* · no fixed version yet
GHSA-rggq-f2wf-m6cp - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in 4equest
- CWE-506
* · no fixed version yet
GHSA-p33q-w45h-2hcj - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in portionfatty12
- CWE-506
>=0.0.0 · no fixed version yet
GHSA-p8fm-w787-x6x3 - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in rrgod
- CWE-506
>=0.0.0 · no fixed version yet
GHSA-277p-xwpp-3jf7 - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in commander-js
- CWE-506
>=0.0.0 · no fixed version yet
GHSA-2hqf-qqmq-pgpp - CVSS 9.8 CriticalCritical · CVSS 9+
Entropy Backdoor in text-qrcode
- CWE-506
>=0.0.0 · no fixed version yet
GHSA-h5vj-f7r9-w564 - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in flatmap-stream
- CWE-506
=0.1.1 · no fixed version yet
GHSA-9x64-5r7x-2q53 - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in foever
- CWE-506
* · no fixed version yet
GHSA-j3qq-qvc8-c6g7 - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in soket.js
- CWE-506
* · no fixed version yet
GHSA-x6gq-467r-hwcc - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in soket.io
- CWE-506
* · no fixed version yet
GHSA-wp2p-q35g-3rjj - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in regenraotr
- CWE-506
* · no fixed version yet
GHSA-5x7p-gm79-383m - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in regenrator
- CWE-506
* · no fixed version yet
GHSA-m5p4-7wf9-6w99 - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in axois
- CWE-506
* · no fixed version yet
GHSA-wpfc-3w63-g4hm - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in boogeyman
- CWE-506
>=0.0.0 · no fixed version yet
GHSA-9hc2-w9gg-q6jw - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in eslint-config-airbnb-standard
- CWE-506
>=2.0.0, <2.1.0 · fixed in 2.1.0
GHSA-m852-866j-69j8 - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in ladder-text-js
- CWE-506
* · no fixed version yet
GHSA-33gc-f8v9-v8hm - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in nothing-js
- CWE-506
* · no fixed version yet
GHSA-353r-3v84-9pjj - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in getcookies
- CWE-506
* · no fixed version yet
GHSA-3cjv-4phw-gvvv - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in nginxbeautifier
- CWE-506
>=1.0.14, <1.0.15 · fixed in 1.0.15
GHSA-28xx-8j99-m32j - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in json-serializer
- CWE-506
>=2.0.10, <2.0.11 · fixed in 2.0.11
GHSA-7xfq-xh6v-4mrm - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in freshdom
- CWE-506
=0.0.6 · no fixed version yet
GHSA-8qm2-24qc-c4qg - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in impala
- CWE-506
=1.1.7 · no fixed version yet
GHSA-92px-q4w8-hrr5 - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in dossier
- CWE-506
=0.0.4 · no fixed version yet
GHSA-c8h6-89q2-mgv8 - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in dynamo-schema
- CWE-506
=0.0.3 · no fixed version yet
GHSA-vp8g-53fw-r9f2 - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in cordova-plugin-china-picker
- CWE-506
=1.0.910 · no fixed version yet
GHSA-x9gm-qxhh-rf75 - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in codify
- CWE-506
=0.3.1 · no fixed version yet
GHSA-2q6w-rxf3-4wc9 - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in blingjs
- CWE-506
=0.0.4 · no fixed version yet
GHSA-hfc6-79wv-5hpw - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in awesome_react_utility
- CWE-506
=1.0.2 · no fixed version yet
GHSA-m25q-fwg4-9v2p - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in another-date-range-picker
- CWE-506
=4.1.48 · no fixed version yet
GHSA-8rxg-9g6f-vq9p - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in another-date-picker
- CWE-506
>=2.0.43, <2.0.45 · fixed in 2.0.45
GHSA-2p62-c4rm-mr72 - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in angular-material-sidenav-rnd
- CWE-506
=0.1.1 · no fixed version yet
GHSA-qmxf-fxq7-w59f - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in angular-bmap
- CWE-506
=0.0.9 · no fixed version yet
GHSA-w8hg-mxvh-9h57 - CVSS 9.8 CriticalCritical · CVSS 9+
Malicious Package in @impala/bmap
- CWE-506
=1.0.3 · no fixed version yet
GHSA-c82c-8pjw-6829 -
cross-env.js is malware
- CWE-506
>=0.0.0 · no fixed version yet
GHSA-hwhq-3hrj-v6v5 · CVE-2017-16081 -
Nodesass is malware
- CWE-506
>=0.0.0 · no fixed version yet
GHSA-xfmw-2vmm-579c · CVE-2017-16080 - CVSS 7.5 High
mysqljs is malware
- CWE-506
>=0.0.0 · no fixed version yet
GHSA-8gv6-g7vp-hr34 · CVE-2017-16047 - CVSS 9.8 CriticalCritical · CVSS 9+
npm-script-demo is malware
- CWE-506
* · no fixed version yet
GHSA-322m-p39j-r5m2 · CVE-2017-16128 - CVSS 9.3 CriticalCritical · CVSS 9+
Potentially tampered sources on Play Store for Chameleon Mini Live Debugger
- maxieds ChameleonMiniLiveDebugger
- CWE-506
- CVSS 8.8 High
lodahs is malware
- CWE-506
>=0.0.1 · no fixed version yet
GHSA-hm6q-r2jc-cpqh · CVE-2019-19771 - CVSS 9.8 CriticalCritical · CVSS 9+
Critical severity vulnerability that affects event-stream and flatmap-stream
- CWE-506
>=3.3.6, <4.0.0 · fixed in 4.0.0
GHSA-mh6f-8j2x-4483 - CVSS 7.5 High
sqlserver is malware
- CWE-506
<=1.0.2 · no fixed version yet
GHSA-3rh7-vm4x-q2hp · CVE-2017-16055 - CVSS 7.5 High
gruntcli is malware
- CWE-506
<=1.0.2 · no fixed version yet
GHSA-9fg5-f5pj-rwcc · CVE-2017-16058 - CVSS 7.5 High
mssql-node is malware
- CWE-506
<=1.0.2 · no fixed version yet
GHSA-3p8f-j2vw-7hw9 · CVE-2017-16059 - CVSS 7.5 High
mssql.js is malware
- CWE-506
<=1.0.2 · no fixed version yet
GHSA-5mhv-9qw8-j63g · CVE-2017-16056 - CVSS 7.5 High
nodemssql is malware
- CWE-506
<=1.0.2 · no fixed version yet
GHSA-9xgh-xgw5-p5cw · CVE-2017-16057 - CVSS 7.5 High
node-tkinter is malware
- CWE-506
<1.0.3 · fixed in 1.0.3
GHSA-mwcv-m549-5cm8 · CVE-2017-16062 - CVSS 7.5 High
tkinter is malware
- CWE-433
- CWE-506
>=0.0.0 · no fixed version yet
GHSA-rwg6-3fmj-w4wx · CVE-2017-16061